
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@yoctol/kurator
Advanced tools
yarn add @yoctol/kurator
const Kurator = require('@yoctol/kurator');
const { createDeployMiddleware } = require('@yoctol/kurator/koa');
const { middleware } = require('bottender');
const kurator = new Kurator({
projectId: '<PROJECT_ID>',
accessToken: '<ACCESS_TOKEN>',
});
bot.onEvent(
middleware([
kurator.createBottenderMiddleware(),
(context) => {
// ...
},
])
);
To get specific action, use kurator.getAction
:
const action = kurator.getAction('<ACTION_ID>');
To register local action, use kurator.registerAction
:
kurator.registerAction('<ACTION_ID>', (context) => {
/* ... */
});
To register multiple local actions, use kurator.registerActions
:
kurator.registerActions({
'<ACTION_ID_1>': (context) => {
/* ... */
},
'<ACTION_ID_2>': (context) => {
/* ... */
},
});
Add DEBUG
env variable for debug package:
DEBUG=kurator
DEBUG=kurator:chatbase
DEBUG=kurator:trigger
DEBUG=kurator:predict
Webhook:
router.use('deployz', createDeployMiddleware({ kurator }));
Polling:
const kurator = new Kurator({
projectId: '<PROJECT_ID>',
accessToken: '<ACCESS_TOKEN>',
polling: {
interval: 5 * 60 * 1000,
},
});
If a map between actionId and actionName is needed, visit: https://kurator.yoctol.com/api/projects/<PROJECT_ID>/action-map
And the result is a map as below:
{
"FOO": "87654321",
"BAR": "12345678"
}
To get action map support in Kurator SDK, just passing actionMap
to your Kurator
constructor:
const kurator = new Kurator({
projectId: '<PROJECT_ID>',
accessToken: '<ACCESS_TOKEN>',
actionMap: {
FOO: '87654321',
BAR: '12345678',
},
});
After that, you can trigger your action by key of the action map:
kurator.getAction('FOO');
// calling with context
await kurator.getAction('FOO')(context);
const kurator = new Kurator({
projectId: '<PROJECT_ID>',
accessToken: '<ACCESS_TOKEN>',
chatbase: {
apiKey: '<CHATBASE_KEY>',
},
});
const kurator = new Kurator({
projectId: '<PROJECT_ID>',
accessToken: '<ACCESS_TOKEN>',
environment: 'staging', // Enum: 'staging' | 'production'
});
customAdapter
to Handle Universal Platformconst customAdapter = {
toTextAction: ({ descriptor: { text, buttons } }) => (context) =>
context.sendText(text),
toImageAction: ({
descriptor: { imageUrl, title, subtitle, webUrl, buttons },
}) => (context) => context.sendImage(imageUrl),
};
new Kurator({
projectId: '<PROJECT_ID>',
accessToken: '<ACCESS_TOKEN>',
customAdapter,
});
FAQs
```sh yarn add @yoctol/kurator ```
The npm package @yoctol/kurator receives a total of 20 weekly downloads. As such, @yoctol/kurator popularity was classified as not popular.
We found that @yoctol/kurator demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.